Data Privacy Statement

Data Protection Notices

Thank you very much for your interest in our company and our products and/or service. We wish that you feel safe when you visit our website and that you know that your personal data is protected. We want you to know which data we collect and how we use it. We are subject to the provisions of the European General Data Protection Regulation (GDPR) as well as the supplementary regulations of the German Federal Data Protection Act (BDSG = Bundesdatenschutzgesetz). To make sure that the data protection regulations are complied with by us and by contracted service providers, we have taken adequate technical and organizational measures.

These Data Protection Notices apply to our online offer. It covers our website, its functions and contents as well as any external online presences, such as our marketing activities on social media. These Data Protection Notices are also used to inform you about how your personal data is further processed and to comply with our duty to inform you.

The terms used in these Data Protection Notices, such as controller or personal data, are used according to Definitions as per GDPR. To improve readability, and in the sense of a comprehensible information transfer, we usually do not name the individual articles, paragraphs, etc.

Controller

The controller in the sense of the GDPR and other national data protection legislation of the Member States as well as other applicable data protection regulations is

AHP Merkle GmbH
Nägelseestrasse 39
79288 Gottenheim
Germany
Phone: +49 7665 4208-0
Fax: +49 7665 4208-88
E-mail: mailbox@ahp.de
Website: www.ahp.de

Data protection officer

The Controller has appointed a data protection officer.
His contact details are:

Bechtle GmbH
IT-Systemhaus Freiburg
Leinenweberstrasse 1
79108 Freiburg im Breisgau
www.bechtle.com
You can contact our data protection officer directly at any time with any questions you may have on the subject of data protection or to enforce your below-mentioned rights.

General information on data processing
Legal bases for processing personal data

In the context of data protection regulations, processing personal data is generally not allowed unless there is a legally admissible reason for permission. We have to inform you about the legal bases of data processing
Provided we request your consent for data processing, this is the legal basis.
When personal data, which is required for the performance of a contract a party of which you are, is processed, the performance of the contract is the legal basis. This also applies to the processing of transactions required to perform pre-contractual measures.
To the extent that the processing of personal details is required to fulfil a legislative obligation to which we are subject, this serves as the legal basis.
In the event of the life-crucial interests of the person involved or of another natural person making it necessary to process their personal details, this serves as the legal basis.
If processing is required to protect a legitimate interest of our company or of a third party, and your interests, basic rights and basic freedoms do not outweigh the aforementioned prior interest, this provides the legal basis for processing.

Hosting 

Hetzner 
We host our website with Hetzner. The provider is Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen (hereinafter referred to as Hetzner). 
For details, please refer to Hetzner's Privacy Policy: 
www.hetzner.com/de/rechtliches/datenschutz. 

The use of Hetzner is based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in ensuring that our website is presented as reliably as possible. If a consent has been requested, the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG (Telemedia Data Protection Act), insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent may be revoked at any time. 

Order processing 
We have concluded an order processing agreement (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. 

Transfer of personal data to a third country
The GDPR guarantees an equally high data protection level within the European Union (EU) and the European Economic Area (EEA). When selecting our service providers and cooperation partners, we therefore prefer European partners wherever possible when your personal data is to be processed. 
If we have your data processed in a third country - this means, outside the EU/EEA -, this is always done in compliance with the legal regulations.
In addition to your explicit consent or contractually or legally required transfer, we only have your data processed in third countries with a recognized data protection level, which have committed themselves to the standard contract clauses of the EU Commission, and/or if certifications or binding internal data protection rules are in place.

Automated decision-making
We do not use automated decision-making.

Recipients of data / categories of recipients
Within our company, we make sure that your data is only disclosed to those persons needing them to fulfil contractual and legal duties.
Sometimes we contract carefully selected external service providers to process your data. Should data be disclosed to service providers acting as processors, this shall be done in compliance with the requirements set out in the GDPR. We have carefully selected our processors; they are bound by our instructions and are regularly controlled and audited. We only contract processors who provide sufficient guarantees that adequate technical and organizational measures are taken in a way that processing is done in compliance with the requirements of the GDPR and the German BDSG while protecting your rights.

Disclosure of personal details to third parties
Generally, we do not transfer any personal data to third parties without your explicit consent. If, during data processing, we disclose your data to third parties, transfer your data to them or grant them access to your data in any other way, this is also done exclusively according to one of the aforementioned legal bases. 
We transfer data, for example, to payment service providers or suppliers if required for the performance of the contract. If we are obliged to do so by law or court order, we have to transfer your data to the relevant entities entitled to information.
Use of our online offer
You may generally use our online offer without disclosing your identity. In this paragraph, we explain when and in which context we process data during your website visit and we explain the implemented functions offered by service providers, how they work and what happens with your data.

Children
Our online offer is generally targeted to adults. Persons under the age of 16 are not allowed to transfer any personal data to us without the consent of their parents or legal guardians.

Encryption for transmission
To protect your transferred data in the best possible way, we use encryption for transmission. To guarantee protection of your data during transmission, we use state-of-the-art SSL/TLS encryption.

Data collection during your website visit
If you use our websites only for information purposes, i.e. you do not register for any offer nor conclude a contract with us or disclose information in any other way, we only collect the personal data your browser transfers to our servers. 
When you visit our websites, we collect the following data which is technically required to show you our websites and to guarantee stability and security:
IP address of the user
Date and time of the request
Contents of the request (precise page)
Access status/HTTP status code
Transferred data volume
Website from which the request is sent
Operating system of the user
Language and version of the browser software.
This data is temporarily stored in our system's log files for a maximum duration of seven days. Any storage beyond this period is possible; however, in this case, the IP address will be truncated or alienated so that it is not longer possible to associate it to the calling client. Log files are not stored together with your other personal data in this context. The legal basis for this type of processing is our legitimate interest.
Since the collection of data to display the websites and the storage of data in log files is necessary for the operation of our websites and to maintain IT security, you do not have the option to object. 

Inquiries
If you send us an inquiry from our website - for example, by means of the contact form -, your personal data will be processed to answer your inquiry:
Use of cookies

General information about the use of cookies
In addition to the above-mentioned data, cookies are stored on your terminal device when you visit our websites. Cookies are data sets that a website can send to a browser; the browser stores and returns them. Cookies are used to store different details that can be read by the original source setting the cookie. 

Legal bases
We use cookies in accordance with the legal requirements. Therefore, we will seek your prior consent for the use of cookies, except where such consent is not required by law. Consent is not required if the storage and reading of the information stored in cookies is absolutely necessary in order to provide the telemedia service (i.e. our online offer) that you have expressly requested. In all other cases, your consent is necessary. You can give this consent in advance, verifiably and revocably, by means of our Consent Management Tool.
You can find information on the legal basis for the respective cookie use in accordance with data protection legislation either in these Data Protection Notices or in our Cookie Management Tool.

Storage period 
Regarding the storage period, two different types of cookies can be used:
Session cookies: these cookies are deleted once you leave our website and close your browser.
Persistent cookies remain stored even after closing the browser. This allows, for example, to store the login status or entered search terms. We use such cookies also for reach measurement.
You can find information regarding the storage period of the respective cookies in our Cookie Management Tool.

Information about used services
Cookie Management Tool
We use a Cookie Management Tool. This allows you to manage the cookies we use as well as the consents you have given, to obtain more information about data processing by means of cookies as well as to learn the purpose and the storage period of the cookies used.

Information on data processing by third parties
Google Analytics
If you have given your consent, Google Analytics is used on this website. It is a web analytics service offered by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). It allows to allocate data, sessions and interactions across several devices to a pseudonymous user ID thus analyzing a user's activities across various devices.
Google Analytics uses cookies that allow to analyze your use of the website. The information generated by the cookies with respect to your use of this website will be generally transmitted to and stored by a Google server in the USA. However, should you access this website from a member state of the European Union or from another country that is party to the Agreement on the European Economic Area, and in case IP anonymization is activated on this website, Google will truncate your IP address before transmission. We have extended Google Analytics on this website with a so-called IP anonymization to guarantee a shortened collection and transmission of IP addresses. The IP address communicated by your browser in relation to Google Analytics is not merged with other data from Google. However, we would like to expressly point out at this point that Google generally processes data for its own purposes, in particular for the purpose of providing its web analysis and tracking service. Within the scope of Google Analytics, further usage data is collected that is to be considered personal data, such as identification features of the individual users, which also allow a connection with an existing Google account, for example.
The following usage data is analyzed on our site by Google Analytics. 
Frequency of page visits
Number of users
Bounce rate (users who leave the website without performing any actions)
Session time (average time of all users)
Country from which the website was accessed
Use of website functions
Which page is selected and how often
Device and device category used by the user to access our website
Google will use this information on our behalf to analyze your use of the website, to collate reports on your activities on our website and to provide other services connected with the use of the website
The legal basis for the use of Google Analytics is your voluntarily given consent.
More information about Google's terms of use and privacy policy can be found here and here.

Recipients / categories of recipients 
The recipients / categories of recipients of the collected data can be found in our Cookie Management Tool.

Data storage period 
Information on the cookies storage period on your terminal advice can be found in our Cookie Management Tool.
The data sent to us and linked to cookies, forms of user identification (e.g. user ID) or advertising IDs are deleted automatically after 14 months. The deletion of data that has reached the end of its storage period takes place automatically once a month. 

Google Ads and conversion tracking
If you have given your consent, Google Ads, including conversion tracking, is used on this website. It is a service offered by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). Google Ads is a web analytics application. We use conversion tracking for a targeted advertising of our offer:
If you click on an ad placed by Google, a cookie is stored on your terminal device due to conversion tracking. If you visit a particular page of our website, we and Google can analyze whether you have clicked on an ad placed by Google and whether you have subsequently been redirected to our website. 
Google provides us with statistics about your visit to our website based on the information collected like this. In addition, we get information about the number of users who have clicked on our ad(s) as well as which pages of our website have been loaded. This information is used to generate conversion statistics for Ads customers who have decided to use conversion tracking. Customers, i.e. we as website operators, learn about the total number of users who have clicked on the ad and have been redirected to a page provided with a conversion tracking tag. However, we do not receive information that personally identifies users.
The legal basis for the use of Google Ads is your voluntarily given consent.

Recipients / categories of recipients
The recipients / categories of recipients of the collected data can be found in our Cookie Management Tool.

Data storage period
Information on the cookies storage period on your terminal advice can be found in our Cookie Management Tool.

Google Tag Manager
Our website uses Google Tags. This is a service offered by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). Google Tag Manager is a solution for managing website tags using one interface. Tags are small code elements on our website that are used, among other things, to measure traffic and user behavior.
The Tag Manager keeps track of a set of tags and trigger rules that determine when we should use these tags on our website. When you visit our website, the current tag configuration is sent to your browser. It includes instructions on which tags should be triggered. The Tag Manager is responsible for triggering tags, which in turn may collect data. The Tag Manager itself does not access this data, as it is operated via a cookie-less domain and does not collect any personal data. If tagging has been deactivated at the domain or cookie level, this also applies to all tracking tags implemented with Google Tag Manager.
Google collects information on how the service is used and on which tags are implemented and in what way. According to Google, this data is used to improve, maintain, protect and develop the service.
For further information, please refer to Google Tag Manager Use Policy and Google Privacy Policy. 
Data storage period
Information on the cookies storage period on your terminal advice can be found in our Cookie Management Tool.

Social media buttons
To share the content of our online offers on social networks, we provide so-called social media buttons. The use of these services require your consent, which you can give by clicking on the respective button ("2-click solution").
The buttons provided directly by the operators of social networks unlawfully transmit personal data, such as the IP address or entire cookies, whenever a website, in which they are integrated, is loaded. In this way, they supply unsolicited information about your online behavior to the social networks without your consent. You do not even have to be logged in or be a member of the relevant network. In contrast, a 2-click solution does not create any direct contact between the social network and web page visitors until they actively click on the share button and thereby give their consent. This solution prevents you from leaving a digital trail on every page you visit.

Youtube
We have implemented YouTube components in several places. YouTube is an online video portal that allows posting videos. Youtube is a service offered by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). More information about Google's terms of use and privacy policy can be found here.
We embed the videos stored on YouTube using a so-called two-click solution. This means that when you open a page in which a video is embedded, the video is initially deactivated and therefore does not load. Only after you have given your consent, the video will be loaded.
Implementation of YouTube contents is only carried out in the so-called extended data protection mode. YouTube provides it and thus guarantees that initially no cookies are stored on your device. However, when the relevant pages are loaded, the data mentioned above under Data collection during your website visit is transferred. This information, however, cannot identify you unless you have logged on YouTube or another Google service before loading our website and/or are permanently logged on. We would like to point out at this point that Google processes this data worldwide and, therefore, it may also be transferred to third countries.
The legal basis for the use of Youtube is your voluntarily given consent.

Online offers on social media
We offer online services on different platforms to provide information or to get in touch with you.
We do not have any influence on the processing of your personal data by the relevant platform operator. Normally, the platform operator stores cookies in your browser when you visit our online offers on these platforms; these cookies store user behavior and/or interests for market research and advertising purposes. 
Platform operators use these user profiles collected on various devices to show you personalized ads. This type of data processing might also affect people who are not registered as users of the relevant platform. Your data may be processed outside the European Union, which likely makes it more difficult for you to enforce your rights. When we select such platforms, we take into consideration, however, whether the operators commit to complying with the EU data protection standards.
Processing your personal data during your visit to one of our offers on social media is based on our legitimate interests in a varied public image of our company and the use of effective information opportunities and communication with you. 
Detailed information on data processing when you use our offers on these platforms, your rights to object and the enforcement of your information right can be found in the privacy statement of the relevant platform operator.

Facebook
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Agreement on the joint processing of personal data in accordance with the GDPR.
Privacy policy of the service provider

Google+/ YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy policy of the service provider

Instagram
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Agreement on the joint processing of personal data in accordance with the GDPR.
Privacy policy of the service provider

LinkedIn
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Agreement on the joint processing of personal data in accordance with the GDPR.
Privacy policy of the service provider

Newsletter
You have the option to subscribe to our free-of-charge e-mail newsletter. This newsletter is only sent after you have given your consent. When you subscribe to our newsletter, the data you enter in the entry mask (name and e-mail address) is transferred to us and stored as long as the newsletter subscription is active.
We ask for your consent to process this data for the purpose of sending the newsletter and we refer you to these Data Protection Notices. For subscription, we use a "double opt-in" procedure. After you have registered, you receive an e-mail with a link that you must click to confirm your subscription. This prevents unauthorized third parties from subscribing using your e-mail address. 
We log the subscription process to be able to prove the procedure according to legal requirements. The IP address of the calling terminal device as well as date and time of the subscription are stored. The data you entered is stored as long as the newsletter subscription is active. 
You may unsubscribe at any time. Each newsletter includes an unsubscribe link for this purpose. This also allows you to revoke your consent. The legal basis for processing your personal data is your voluntarily given consent to receive newsletters.
If you purchase goods or services and provide your e-mail address for this purpose, we reserve the right to use it to send newsletters with direct advertising for our own similar products or services. This serves for the purpose of protecting our prevailing legitimate interests in a promotional approach to our customers in the course of balancing interests. You may object to this use of your data at any time by sending a message to one of the below-mentioned contact options or by means of the unsubscribe link in the advertising mail without incurring any other transfer costs than the basic rates. If the newsletter is sent due to the sale of goods and services, we refer to the requirements of the German unfair competition legislation (UWG).

Inxmail 
This website uses Inxmail for sending newsletters. The provider is Inxmail GmbH, Wetzinger Straße 17, 79106 Freiburg (hereinafter referred to as Inxmail). 
Inxmail is a service that can be used, among other things, for organizing and analyzing the sending of newsletters. The data you have entered for the purpose of receiving the newsletter will be stored on the servers of Inxmail.

Data analysis by Inxmail 
By using Inxmail, we are able to analyze our newsletter campaigns. We can see, for example, whether a newsletter message has been opened and which links have been clicked on, if any. In this way, we can determine, among other things, which links have been clicked on particularly often. 
In addition, we can see whether certain pre-defined actions have been performed after opening / clicking (conversion rate). This allows us to see, for example, whether you have made a purchase after clicking on the newsletter. 
Inxmail also allows us to classify ("cluster") newsletter recipients into different categories. The newsletter recipients can be subdivided according to age, gender or place of residence, for example. In this way, newsletters can be customized to the respective target groups. If you do not want Inxmail to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a unsubscribe link in each newsletter message. 

For the Inxmail Privacy Policy, please go to: 
www.inxmail.de/datenschutz. 

You can unsubscribe from the ahp.letter (newsletter) at any time by clicking on this link: 
newsletter.ahp.de/abmeldung_newsletter_de_.jsp 

Anonymous tracking 
We use Inxmail's anonymous tracking, which only allows us to identify you if you have given your explicit prior consent. 
Legal basis 
The data processing is based on your consent (Art. 6 Para. 1 lit. a GDPR). You are entitled to revoke your consent to future processing at any time. 

Storage period 
The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose has ceased to exist. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion, within the scope of our legitimate interest, according to Art. 6 Para. 1 lit. f GDPR. This does not affect data stored by us for other purposes. 

Commercial and business services
We process data of our contract and business partners, such as suppliers, customers and interested parties (in the following referred to as business partners) in the context of contractual or similar legal relationships as well as related measures and to communicate with our business partners.
This data is processed to fulfill our contractual duties, to safeguard our rights and for purposes of related administration tasks as well as corporate organization. We only transfer our business partners' data to third parties in compliance with the applicable law insofar as this is required for the above-mentioned purposes or to fulfill legal duties or with the data subject's consent (e.g. to telecommunications, transport and other assistance services as well as subcontractors, banks, tax consultants and legal counsels, payment service providers or tax authorities). We will inform our contractual partners in the context of this Data Protection Notices about any other forms of processing, for example, for marketing purposes.
We inform our business partners before or during data collection or personally which data are required for these purposes.

Erasure of data and storage period 
As soon as the purpose for processing is no longer applicable, we erase or block your personal data. However, data might be stored longer than this period if it is required due to legal regulations to which we are bound. This mainly concerns data that has to be stored for archiving as required by law (e.g. 6 years based on commercial law or 10 years based on tax law).

Processed data: 
Personal details (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact details (e.g. e-mail address, phone numbers), contract data (e.g. subject matter, term).

Purpose of processing: 
Provision of contractual services and customer service, contact inquiries and communication, internal organizational procedures, administration and reply to inquiries.

Legal bases: 
Performance of a contract / precontractual inquiries, legal duty, legitimate interests.

Applications
If you apply for a job in our company, the data provided by you, such as contact details and qualifications, are only used for the application process.
Your data will be forwarded internally to the responsible division head. We process your personal data for the purpose of your application for an employment relationship, provided this is necessary for the decision on the establishment of an employment relationship with us.
Furthermore, we can process your personal data if it is required to defend any legal claims enforced in the context of the application procedure.
Your data is generally erased 6 months after the application process ends, unless there are any agreements to the contrary made with the applicant (see admission to the applicant pool, for example). If your application results in the conclusion of an employment contract, your data will be entered in your personnel file.

How long will your data be stored?
We store your personal data as long as it is necessary to come to a decision regarding your application. If the employment relationship between you and us does not come into existence, we may still keep your data provided this is necessary to defend against possible legal claims. The application documents will be erased 6 months after notification of the rejection decision, unless longer storage is required due to legal disputes.

Admission to the applicant pool
If we do not currently have a suitable position for you - in case of an open application for example - we will gladly include your application in an applicant pool and store it for 6 months. However, this requires your consent, which we will request from you in such a case.
If your application in the applicant pool is not used by us within a year, your application is automatically erased.

No automated decision-making
There is no automated decision-making in individual cases, i.e. a decision regarding your application is not based exclusively on automated processing.

Data subject rights
You, as a data subject, are entitled to various rights about which we would like to inform you in the following. Depending on the purpose and type of processing of your personal data, you are entitled to the rights described in the following sections. 

Your right of access
As a data subject, you are entitled to be informed by us whether we process your personal data and - if this is the case - which personal data we process. 
You are also entitled to request a copy of the personal data processed by us.

Your right to rectification
You are entitled to request from us the rectification of your personal data you consider incorrect. 
You are also entitled to request the completion of your personal data you consider incomplete.

Your right to erasure
If the legal requirements are met, you may demand the erasure of your personal data.
This is the case, for example, if we process your data based on your consent and you revoke your consent.
However, we may not erase any data, for example, if we have to store them due to legal retention periods. We cannot fulfill your erasure request either if it is necessary that we process your personal data for the establishment, exercise or defense of legal claims.

Your right to restriction of processing
Under certain conditions, you, as a data subject, are entitled to restrict processing of your personal data.
One of these conditions is, for example, that you dispute the accuracy of your personal data. Or the case that we do not longer need your personal data but you need them for the establishment, exercise or defense of legal claims.

Your right to object
If we process your personal data based on a legitimate interest, you are entitled to object to such processing on grounds relating to your particular situation.  You are not entitled to this right to object, however, if processing is based on a compelling public interest which prevails your interest, if we are obliged to process your data due to a legal provision or if processing is required for the establishment, exercise or defense of legal claims.
If we use your personal data for direct marketing, then you have the right to object to the processing for the purpose of such advertising at any time. If you object to processing for such purpose, your personal data will no longer be processed for this purpose.
If we process your data based on your consent, you are entitled to withdraw your consent any time with future effect. Withdrawal of your consent does not affect the legitimate nature of any processing that may have taken place before your withdrawal.

Your right to data portability
You have this right only with regard to personal data that you have provided to us yourself. You are entitled to request from us that this personal data is directly transferred from us to another controller. 
Alternatively, you are entitled to request from us that we make your data available in a machine-readable format. However, this applies only if we process your personal data based on your consent or a contract and if processing is carried out using automated processes.

Complaint with a supervisory authority
Furthermore, you are entitled to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations.

Reporting portal for the Whistleblower Protection Act (HinSchG)

We operate a reporting portal in accordance with the Whistleblower Protection Act (HinSchG). For this purpose, we use a service provided by bbg bitbase group GmbH, Am Heilbrunnen 47, 72766 Reutlingen. We treat information in accordance with Section 8 HinSchG confidentially. The purpose of the reporting portal for the Whistleblower Protection Act (HinSchG) is to review and document reports for internal investigation and, if necessary, to pass them on to authorized bodies in order to remedy unlawful abuses at the company in accordance with Section 2 HinSchG.

Whistleblowers have the option of registering on our website to use the whistleblower portal. To register, log in and make contact, we process data that is automatically transmitted by the Internet browser and personal data that you can provide as a whistleblower: Access data, title (if provided), first name and surname (if provided), contact details (e-mail address, telephone number or postal address, if provided), personal data in the report, in particular behavioral violations with corresponding facts.

You have the option of registering anonymously. In doing so, you will receive a unique identification code that gives you access to a closed data protection room. Here you have the opportunity to submit your report. No data will be passed on to third parties outside your company without your consent, unless this is required by law or by order such as § 9 HinSchG. The data may then be passed on to investigating authorities or courts.

The legal basis for data processing under the HinSchG is the legal obligation pursuant to Art. 6 para. 1 sentence 1 lit. a c) GDPR in conjunction with § Section 12 HinSchG. Insofar as you provide particularly sensitive data such as your health, sexuality, origin or criminal offenses, Art. 9 and 10 GDPR must also be observed.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. According to Section 11 HinSchG, this is usually the case after three years. Other storage obligations due to contractual relationships and processing to fulfill contractual or legal obligations, such as six- or ten-year retention obligations under commercial and tax law, remain unaffected.

For further information, in particular on your rights as a data subject, please refer to the general privacy policy of bbg bitbase group GmbH: https://www.bitbasegroup.com/datenschutzerklaerung.

Modifications

These Data Protection Notices will be amended from time to time. These modifications are made, for example, if changes occur due to technical progress, legal requirements or other influences.

Version: 2023-12-13